The isolation tech behind managed AI sandboxes (gVisor, Firecracker) — worth it locally?

In Part 1, I laid out three options for where to draw the isolation boundary around an AI coding...